Microsoft Exchange Server Spoofing Vulnerability

A spoofing vulnerability has been identified in Microsoft Exchange Server due to improper input validation. This issue allows an unauthorized attacker to perform spoofing attacks over the network. The vulnerability affects multiple versions of Microsoft Exchange Server, including Exchange Server 2019 Cumulative Update 14 and 15, Exchange Server 2016 Cumulative Update 23, and Exchange Server Subscription Edition RTM.

Impact

Exploitation of this vulnerability could lead to unauthorized spoofing over the network.

Remediation

Users can download the security update for Microsoft Exchange Server 2019 Cumulative Update 14, 2019 Cumulative Update 15, Exchange Server 2016 Cumulative Update 23, and Exchange Server Subscription Edition RTM from the Microsoft Update Catalog.